Sign-up

ID

VAR-201008-0042


CVE

CVE-2010-0834


TITLE

Ubuntu Vulnerability to execute arbitrary code in the base file package running above

Trust: 0.8

sources: JVNDB: JVNDB-2010-005299

DESCRIPTION

The base-files package before 5.0.0ubuntu7.1 on Ubuntu 9.10 and before 5.0.0ubuntu20.10.04.2 on Ubuntu 10.04 LTS, as shipped on Dell Latitude 2110 netbooks, does not require authentication for package installation, which allows remote archive servers and man-in-the-middle attackers to execute arbitrary code via a crafted package. Ubuntu installed on Dell Latitude 2110 netbooks is prone to a security-bypass vulnerability. Successfully exploiting this issue will allow attackers to install malicious packages, resulting in the complete compromise of affected computers. =========================================================== Ubuntu Security Notice USN-968-1 August 05, 2010 base-files vulnerability CVE-2010-0834 =========================================================== A security issue affects the following Ubuntu releases: Ubuntu 9.10 Ubuntu 10.04 LTS This advisory also applies to the corresponding versions of Kubuntu, Edubuntu, and Xubuntu. The problem can be corrected by upgrading your system to the following package versions: Ubuntu 9.10: base-files 5.0.0ubuntu7.1 Ubuntu 10.04 LTS: base-files 5.0.0ubuntu20.10.04.2 In general, a standard system update will make all the necessary changes. Updated packages for Ubuntu 9.10: Source archives: http://security.ubuntu.com/ubuntu/pool/main/b/base-files/base-files_5.0.0ubuntu7.1.dsc Size/MD5: 853 a699f7de48cd09591785129b4840ef56 http://security.ubuntu.com/ubuntu/pool/main/b/base-files/base-files_5.0.0ubuntu7.1.tar.gz Size/MD5: 74901 d802a9135ce2e49e065926b69e16e646 Architecture independent packages: http://security.ubuntu.com/ubuntu/pool/main/b/base-files/lsb-release-udeb_5.0.0ubuntu7.1_all.udeb Size/MD5: 788 558c290ae2250679a3836da80fa3ebc0 amd64 architecture (Athlon64, Opteron, EM64T Xeon): http://security.ubuntu.com/ubuntu/pool/main/b/base-files/base-files_5.0.0ubuntu7.1_amd64.deb Size/MD5: 68358 67faf1b12530db1c708ba12994d88f60 i386 architecture (x86 compatible Intel/AMD): http://security.ubuntu.com/ubuntu/pool/main/b/base-files/base-files_5.0.0ubuntu7.1_i386.deb Size/MD5: 68354 ec91c2c47ba30e2a3f2c5ee3ef73d812 lpia architecture (Low Power Intel Architecture): http://ports.ubuntu.com/pool/main/b/base-files/base-files_5.0.0ubuntu7.1_lpia.deb Size/MD5: 68360 1feaa5345fd288eca0fdd180ee12e140 powerpc architecture (Apple Macintosh G3/G4/G5): http://ports.ubuntu.com/pool/main/b/base-files/base-files_5.0.0ubuntu7.1_powerpc.deb Size/MD5: 68364 4543aabd986eced6a2dadd78ab93daf9 sparc architecture (Sun SPARC/UltraSPARC): http://ports.ubuntu.com/pool/main/b/base-files/base-files_5.0.0ubuntu7.1_sparc.deb Size/MD5: 68366 2ccfbeddb349e6999d93d2505ed40a10 Updated packages for Ubuntu 10.04: Source archives: http://security.ubuntu.com/ubuntu/pool/main/b/base-files/base-files_5.0.0ubuntu20.10.04.2.dsc Size/MD5: 876 9afddf09156582a48e57c76fab0cf4fa http://security.ubuntu.com/ubuntu/pool/main/b/base-files/base-files_5.0.0ubuntu20.10.04.2.tar.gz Size/MD5: 76356 d57362eab34a8e9f6cf27b595143c332 Architecture independent packages: http://security.ubuntu.com/ubuntu/pool/main/b/base-files/lsb-release-udeb_5.0.0ubuntu20.10.04.2_all.udeb Size/MD5: 788 3e937b94118602fc84aab4adbe3f9e97 amd64 architecture (Athlon64, Opteron, EM64T Xeon): http://security.ubuntu.com/ubuntu/pool/main/b/base-files/base-files_5.0.0ubuntu20.10.04.2_amd64.deb Size/MD5: 70240 2ecf9c810ef2f2315f63881068d8b839 i386 architecture (x86 compatible Intel/AMD): http://security.ubuntu.com/ubuntu/pool/main/b/base-files/base-files_5.0.0ubuntu20.10.04.2_i386.deb Size/MD5: 70236 d780378cf42209eeb90ed2f68940b837 powerpc architecture (Apple Macintosh G3/G4/G5): http://ports.ubuntu.com/pool/main/b/base-files/base-files_5.0.0ubuntu20.10.04.2_powerpc.deb Size/MD5: 70230 3a5889ee074ddf43e7be7e6cbbc81c16 sparc architecture (Sun SPARC/UltraSPARC): http://ports.ubuntu.com/pool/main/b/base-files/base-files_5.0.0ubuntu20.10.04.2_sparc.deb Size/MD5: 70236 c1fdeedbea2bcb8423ea745406ec3a05 . ---------------------------------------------------------------------- Get tweets from Secunia http://twitter.com/secunia ---------------------------------------------------------------------- TITLE: Ubuntu base-files Dell Latitude 2110 Unauthenticated Package Installation SECUNIA ADVISORY ID: SA40889 VERIFY ADVISORY: Secunia.com http://secunia.com/advisories/40889/ Customer Area (Credentials Required) https://ca.secunia.com/?page=viewadvisory&vuln_id=40889 RELEASE DATE: 2010-08-07 DISCUSS ADVISORY: http://secunia.com/advisories/40889/#comments AVAILABLE ON SITE AND IN CUSTOMER AREA: * Last Update * Popularity * Comments * Criticality Level * Impact * Where * Solution Status * Operating System / Software * CVE Reference(s) http://secunia.com/advisories/40889/ ONLY AVAILABLE IN CUSTOMER AREA: * Authentication Level * Report Reliability * Secunia PoC * Secunia Analysis * Systems Affected * Approve Distribution * Remediation Status * Secunia CVSS Score * CVSS https://ca.secunia.com/?page=viewadvisory&vuln_id=40889 ONLY AVAILABLE WITH SECUNIA CSI AND SECUNIA PSI: * AUTOMATED SCANNING http://secunia.com/vulnerability_scanning/personal/ http://secunia.com/vulnerability_scanning/corporate/wsus_sccm_3rd_third_party_patching/ DESCRIPTION: Canonical has acknowledged a vulnerability in Ubuntu, which can be exploited by malicious people to bypass certain security features. This can be exploited to e.g. SOLUTION: Apply updated packages. Further details available in Customer Area: http://secunia.com/products/corporate/EVM/ PROVIDED AND/OR DISCOVERED BY: Reported by the vendor. ORIGINAL ADVISORY: USN-968-1: http://www.ubuntu.com/usn/usn-968-1 OTHER REFERENCES: Further details available in Customer Area: http://secunia.com/products/corporate/EVM/ DEEP LINKS: Further details available in Customer Area: http://secunia.com/products/corporate/EVM/ EXTENDED DESCRIPTION: Further details available in Customer Area: http://secunia.com/products/corporate/EVM/ EXTENDED SOLUTION: Further details available in Customer Area: http://secunia.com/products/corporate/EVM/ EXPLOIT: Further details available in Customer Area: http://secunia.com/products/corporate/EVM/ ---------------------------------------------------------------------- About: This Advisory was delivered by Secunia as a free service to help private users keeping their systems up to date against the latest vulnerabilities. Subscribe: http://secunia.com/advisories/secunia_security_advisories/ Definitions: (Criticality, Where etc.) http://secunia.com/advisories/about_secunia_advisories/ Please Note: Secunia recommends that you verify all advisories you receive by clicking the link. Secunia NEVER sends attached files with advisories. Secunia does not advise people to install third party patches, only use those supplied by the vendor. ---------------------------------------------------------------------- Unsubscribe: Secunia Security Advisories http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org ----------------------------------------------------------------------

Trust: 2.16

sources: NVD: CVE-2010-0834 // JVNDB: JVNDB-2010-005299 // BID: 42280 // VULHUB: VHN-43439 // PACKETSTORM: 92503 // PACKETSTORM: 92562

AFFECTED PRODUCTS

vendor:ubuntumodel:linuxscope:eqversion:9.10

Trust: 1.9

vendor:ubuntumodel:linuxscope:eqversion:10.04

Trust: 1.6

vendor:canonicalmodel:ubuntuscope:eqversion:5.04 9.10 and 10.04 lts

Trust: 0.8

vendor:ubuntumodel:linux sparcscope:eqversion:9.10

Trust: 0.3

vendor:ubuntumodel:linux powerpcscope:eqversion:9.10

Trust: 0.3

vendor:ubuntumodel:linux lpiascope:eqversion:9.10

Trust: 0.3

vendor:ubuntumodel:linux i386scope:eqversion:9.10

Trust: 0.3

vendor:ubuntumodel:linux amd64scope:eqversion:9.10

Trust: 0.3

vendor:ubuntumodel:linux sparcscope:eqversion:10.04

Trust: 0.3

vendor:ubuntumodel:linux powerpcscope:eqversion:10.04

Trust: 0.3

vendor:ubuntumodel:linux ltsscope:eqversion:10.04

Trust: 0.3

vendor:ubuntumodel:linux i386scope:eqversion:10.04

Trust: 0.3

vendor:ubuntumodel:linux amd64scope:eqversion:10.04

Trust: 0.3

sources: BID: 42280 // JVNDB: JVNDB-2010-005299 // CNNVD: CNNVD-201008-081 // NVD: CVE-2010-0834

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2010-0834
value: HIGH

Trust: 1.0

NVD: CVE-2010-0834
value: HIGH

Trust: 0.8

CNNVD: CNNVD-201008-081
value: CRITICAL

Trust: 0.6

VULHUB: VHN-43439
value: HIGH

Trust: 0.1

nvd@nist.gov: CVE-2010-0834
severity: HIGH
baseScore: 9.3
vectorString: AV:N/AC:M/AU:N/C:C/I:C/A:C
accessVector: NETWORK
accessComplexity: MEDIUM
authentication: NONE
confidentialityImpact: COMPLETE
integrityImpact: COMPLETE
availabilityImpact: COMPLETE
exploitabilityScore: 8.6
impactScore: 10.0
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.8

VULHUB: VHN-43439
severity: HIGH
baseScore: 9.3
vectorString: AV:N/AC:M/AU:N/C:C/I:C/A:C
accessVector: NETWORK
accessComplexity: MEDIUM
authentication: NONE
confidentialityImpact: COMPLETE
integrityImpact: COMPLETE
availabilityImpact: COMPLETE
exploitabilityScore: 8.6
impactScore: 10.0
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.1

sources: VULHUB: VHN-43439 // JVNDB: JVNDB-2010-005299 // CNNVD: CNNVD-201008-081 // NVD: CVE-2010-0834

PROBLEMTYPE DATA

problemtype:CWE-287

Trust: 1.9

sources: VULHUB: VHN-43439 // JVNDB: JVNDB-2010-005299 // NVD: CVE-2010-0834

THREAT TYPE

remote

Trust: 0.7

sources: PACKETSTORM: 92503 // CNNVD: CNNVD-201008-081

TYPE

authorization issue

Trust: 0.6

sources: CNNVD: CNNVD-201008-081

CONFIGURATIONS

sources:
            
            
            JVNDB: JVNDB-2010-005299

EXPLOIT AVAILABILITY
sources:
            
            
            VULHUB: VHN-43439

PATCH
title:USN-968-1url:http://www.ubuntu.com/usn/usn-968-1/
Trust: 0.8
sources:
            
            
            JVNDB: JVNDB-2010-005299

EXTERNAL IDS
db:NVDid:CVE-2010-0834
Trust: 2.9
db:BIDid:42280
Trust: 2.0
db:SECUNIAid:40889
Trust: 1.8
db:VUPENid:ADV-2010-2015
Trust: 1.7
db:JVNDBid:JVNDB-2010-005299
Trust: 0.8
db:UBUNTUid:USN-968-1
Trust: 0.6
db:CNNVDid:CNNVD-201008-081
Trust: 0.6
db:PACKETSTORMid:92503
Trust: 0.2
db:VULHUBid:VHN-43439
Trust: 0.1
db:PACKETSTORMid:92562
Trust: 0.1
sources:
            
            
            VULHUB: VHN-43439 // 
            
            
            
            BID: 42280 // 
            
            
            
            JVNDB: JVNDB-2010-005299 // 
            
            
            
            PACKETSTORM: 92503 // 
            
            
            
            PACKETSTORM: 92562 // 
            
            
            
            CNNVD: CNNVD-201008-081 // 
            
            
            
            NVD: CVE-2010-0834

REFERENCES
url:http://www.ubuntu.com/usn/usn-968-1
Trust: 1.8
url:http://www.securityfocus.com/bid/42280
Trust: 1.7
url:http://secunia.com/advisories/40889
Trust: 1.7
url:http://www.vupen.com/english/advisories/2010/2015
Trust: 1.7
url:http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2010-0834
Trust: 0.8
url:http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2010-0834
Trust: 0.8
url:http://www.ubuntu.com/
Trust: 0.3
url:http://security.ubuntu.com/ubuntu/pool/main/b/base-files/base-files_5.0.0ubuntu7.1.tar.gz
Trust: 0.1
url:http://security.ubuntu.com/ubuntu/pool/main/b/base-files/base-files_5.0.0ubuntu7.1_i386.deb
Trust: 0.1
url:http://security.ubuntu.com/ubuntu/pool/main/b/base-files/lsb-release-udeb_5.0.0ubuntu7.1_all.udeb
Trust: 0.1
url:http://ports.ubuntu.com/pool/main/b/base-files/base-files_5.0.0ubuntu7.1_powerpc.deb
Trust: 0.1
url:http://security.ubuntu.com/ubuntu/pool/main/b/base-files/base-files_5.0.0ubuntu20.10.04.2.tar.gz
Trust: 0.1
url:http://security.ubuntu.com/ubuntu/pool/main/b/base-files/base-files_5.0.0ubuntu7.1_amd64.deb
Trust: 0.1
url:http://ports.ubuntu.com/pool/main/b/base-files/base-files_5.0.0ubuntu7.1_sparc.deb
Trust: 0.1
url:http://security.ubuntu.com/ubuntu/pool/main/b/base-files/base-files_5.0.0ubuntu20.10.04.2_i386.deb
Trust: 0.1
url:http://security.ubuntu.com/ubuntu/pool/main/b/base-files/base-files_5.0.0ubuntu20.10.04.2.dsc
Trust: 0.1
url:http://security.ubuntu.com/ubuntu/pool/main/b/base-files/base-files_5.0.0ubuntu20.10.04.2_amd64.deb
Trust: 0.1
url:http://ports.ubuntu.com/pool/main/b/base-files/base-files_5.0.0ubuntu20.10.04.2_powerpc.deb
Trust: 0.1
url:http://ports.ubuntu.com/pool/main/b/base-files/base-files_5.0.0ubuntu20.10.04.2_sparc.deb
Trust: 0.1
url:https://nvd.nist.gov/vuln/detail/cve-2010-0834
Trust: 0.1
url:http://security.ubuntu.com/ubuntu/pool/main/b/base-files/lsb-release-udeb_5.0.0ubuntu20.10.04.2_all.udeb
Trust: 0.1
url:http://ports.ubuntu.com/pool/main/b/base-files/base-files_5.0.0ubuntu7.1_lpia.deb
Trust: 0.1
url:http://security.ubuntu.com/ubuntu/pool/main/b/base-files/base-files_5.0.0ubuntu7.1.dsc
Trust: 0.1
url:https://ca.secunia.com/?page=viewadvisory&vuln_id=40889
Trust: 0.1
url:http://twitter.com/secunia
Trust: 0.1
url:http://secunia.com/products/corporate/evm/
Trust: 0.1
url:http://secunia.com/advisories/secunia_security_advisories/
Trust: 0.1
url:http://secunia.com/vulnerability_scanning/corporate/wsus_sccm_3rd_third_party_patching/
Trust: 0.1
url:http://secunia.com/vulnerability_scanning/personal/
Trust: 0.1
url:http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org
Trust: 0.1
url:http://secunia.com/advisories/40889/#comments
Trust: 0.1
url:http://secunia.com/advisories/40889/
Trust: 0.1
url:http://secunia.com/advisories/about_secunia_advisories/
Trust: 0.1
sources:
            
            
            VULHUB: VHN-43439 // 
            
            
            
            BID: 42280 // 
            
            
            
            JVNDB: JVNDB-2010-005299 // 
            
            
            
            PACKETSTORM: 92503 // 
            
            
            
            PACKETSTORM: 92562 // 
            
            
            
            CNNVD: CNNVD-201008-081 // 
            
            
            
            NVD: CVE-2010-0834

CREDITS
Ubuntu
Trust: 0.4
sources:
            
            
            BID: 42280 // 
            
            
            
            PACKETSTORM: 92503

SOURCES
db:VULHUBid:VHN-43439
db:BIDid:42280
db:JVNDBid:JVNDB-2010-005299
db:PACKETSTORMid:92503
db:PACKETSTORMid:92562
db:CNNVDid:CNNVD-201008-081
db:NVDid:CVE-2010-0834

LAST UPDATE DATE
2024-08-14T15:09:05.129000+00:00

SOURCES UPDATE DATE
db:VULHUBid:VHN-43439date:2010-08-10T00:00:00
db:BIDid:42280date:2010-08-06T00:00:00
db:JVNDBid:JVNDB-2010-005299date:2012-12-20T00:00:00
db:CNNVDid:CNNVD-201008-081date:2010-08-13T00:00:00
db:NVDid:CVE-2010-0834date:2010-08-10T12:23:05.850

SOURCES RELEASE DATE
db:VULHUBid:VHN-43439date:2010-08-10T00:00:00
db:BIDid:42280date:2010-08-06T00:00:00
db:JVNDBid:JVNDB-2010-005299date:2012-12-20T00:00:00
db:PACKETSTORMid:92503date:2010-08-06T18:04:16
db:PACKETSTORMid:92562date:2010-08-10T09:25:54
db:CNNVDid:CNNVD-201008-081date:2010-08-13T00:00:00
db:NVDid:CVE-2010-0834date:2010-08-10T12:23:05.850